
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa
File: 323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa (raw, json)
Hash identifier: nNMs4gzZouC2bepJxjlcJbDZL5fihv7Ir9TJIBE9nXk=
Subject key identifier: 44:57:DA:C2:27:D9:CF:BE:80:68:57:C4:70:1D:AD:A8:04:4B:C2:09
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 7C0C90E846376FA1D4CAACB3834EDCB47A711483
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa
Signing time: Mon 27 Apr 2026 08:37:06 +0000
ROA not before: Mon 27 Apr 2026 08:32:06 +0000
ROA not after: Mon 26 Apr 2027 08:37:06 +0000
asID: 10212
IP address blocks: 2403:b400:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 09:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0c:90:e8:46:37:6f:a1:d4:ca:ac:b3:83:4e:dc:b4:7a:71:14:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 27 08:32:06 2026 GMT
Not After : Apr 26 08:37:06 2027 GMT
Subject: CN=4457DAC227D9CFBE806857C4701DADA8044BC209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:d2:33:29:8f:0a:9a:50:eb:7f:3a:6a:0a:
7f:9d:40:c9:61:0d:eb:40:f6:15:0a:9f:3e:e6:e6:
26:de:ae:52:27:b8:e2:9e:96:c0:6d:5d:5b:13:82:
c2:3a:7f:71:f5:40:33:5a:45:d2:50:d2:f3:d9:d7:
5f:4b:1e:3c:a0:64:83:bb:c0:cf:51:10:dc:41:73:
7f:2a:91:57:7e:20:75:af:45:84:68:f8:ee:5d:2d:
6e:52:87:04:14:e3:2f:84:51:f9:f4:5f:d7:88:90:
04:fd:bb:b1:0f:ec:16:ed:e7:fa:58:55:9c:62:c2:
a8:9e:43:3d:09:e7:5d:5c:84:03:86:51:46:ee:fc:
34:84:59:a6:1d:93:b8:c4:fe:65:fe:72:e2:ab:78:
36:a1:5e:b9:d4:66:02:67:84:ff:96:58:d3:98:23:
0c:f5:c8:87:79:2a:dd:37:8c:11:65:d0:93:03:c4:
61:c0:d6:22:e0:04:8d:9b:30:6f:63:41:75:7b:b1:
06:db:64:f2:75:ff:65:04:d1:f7:98:f9:a1:44:4f:
06:44:f9:47:16:0b:95:ac:75:67:d6:ad:7e:90:96:
5f:e2:6f:10:1d:8f:ab:1b:60:65:dc:e2:e8:10:a1:
b6:4a:4a:28:45:83:20:1e:ff:41:4b:84:6b:a3:5b:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:DA:C2:27:D9:CF:BE:80:68:57:C4:70:1D:AD:A8:04:4B:C2:09
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b400:2001::/48
Signature Algorithm: sha256WithRSAEncryption
0c:40:12:3d:a0:5d:08:c9:dd:c3:41:a0:54:20:88:f8:79:d8:
5b:0d:2f:80:7a:e4:aa:2b:4c:46:e8:2d:36:d0:4d:fc:cc:02:
84:c1:a0:80:c1:fb:07:ba:57:f2:e4:03:cf:88:5d:61:f3:2e:
40:fb:dd:d6:52:1d:89:bc:7c:e0:24:38:4f:c9:a9:8f:28:a7:
d8:b7:bf:e8:ea:6a:ce:1e:ac:b2:34:df:6c:8f:b7:87:4f:e6:
7c:bc:90:3e:b6:c5:31:5a:28:89:f4:1f:cb:c4:83:28:7e:20:
68:cf:b0:34:c4:cd:34:20:eb:91:59:8d:82:1e:8d:e7:57:64:
3f:0d:52:7c:a6:63:a5:c8:fe:6b:3f:03:9c:70:28:2e:3f:b7:
86:06:90:f4:f1:e9:8c:14:5f:33:4b:1d:74:5f:07:00:1d:5a:
ae:2f:6c:1c:2a:f3:bf:99:b6:c4:ea:e4:be:dd:18:d0:70:2b:
c2:c0:07:b6:22:4b:c9:49:15:b9:0a:f8:56:bc:0a:b9:02:15:
7d:b7:43:84:48:f8:21:20:d2:39:1f:58:9f:5b:1f:73:e2:60:
dc:e9:6d:e5:24:b2:ae:7d:6c:e8:a9:4a:01:8e:49:fc:6f:93:
df:cb:cf:57:f4:16:7a:9f:6d:ec:7d:c6:55:40:35:a5:93:ca:
ca:15:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:09 2026 by rpki-client